Bing.xml

<!--
	For other Microsoft coverage, see Microsoft.xml.


	CDN buckets:

		- a134.lm.akamai.net

			- akam.bing.com
			- ts[1-4].mm.bing.net

		- ssl.bing.com.edgekey.net

			- ssl.bing.com


	Nonfunctional domains:

		- bing.com:

			images/ *
			notifications/ *	not in fd/
			thumb/ *

		- api.bing.com			(404, akamai)
		- db3.api.bing.com		(404; mismatched, CN: bedrock.msn.com)

	* Redirects to http


	Problematic domains:

		- www.bing.com		(redirects to http, akamai)
		- ts[1-4].mm.bing.net	(akamai)


	Partially covered domains:

		- (www.)bing.com	(→ ssl.bing.com)


	Fully covered domains:

		- bing.com subdomains:

			- c.bing		(tracking beacons)
			- h.bing
			- ssl.bing
			- udc.bing

		- ts[1-4].mm.bing.net

-->
<ruleset name="Bing (partial, buggy)" default_off="breaks points dashboard" platform="mixedcontent">

	<target host="bing.com" />
	<target host="*.bing.com" />
	<target host="*.mm.bing.net" />
		<!--
			Breaks login menu

				https://trac.torproject.org/projects/tor/ticket/7092
										-->
		<exclusion pattern="^https?://(?:www\.)?bing\.com/fd/fb/mulmfg" />


	<securecookie host="^(?:\.c|ssl)\.bing\.com$" name=".+" />


	<rule from="^http://(?:www\.)?bing\.com/(az/|fd/|HPImageArchive\.aspx|mm/|news/s/|s/as/|sa/|th(?:$|\?))"
		to="https://ssl.bing.com/$1" />

	<!--	- fd/s/ is equivalent and fd/ seems to work always, so redirect there
		- /bing and /ssl.bing are the same here, but ssl has an EV
								-->
	<rule from="^http://(?:www\.)?bing\.com/s/"
		to="https://ssl.bing.com/fd/s/" />

	<rule from="^http://(c|h|ssl|udc)\.bing\.com/"
		to="https://$1.bing.com/" />

	<rule from="^http://ts[1-4]\.mm\.bing\.net/"
		to="https://ssl.bing.com/"/>

</ruleset>